users@glassfish.java.net

Re: per-application policy file not working

From: Vivek Pandey <Vivek.Pandey_at_Sun.COM>
Date: Thu, 07 Jan 2010 09:41:23 -0800

Mathijs Kwik wrote:
> Hi all,
>
> I would like to grant some applications more permissions than others.
> As described here
> http://docs.sun.com/app/docs/doc/820-7695/beabz?a=view , this is
> possible without creating a domain per application.
>
> I checked domains/domain1/generated/policy but there's no directory
> for my app there.
> I created it and created a granted.policy file in there containing:
> grant {
> permission java.security.AllPermission;
> };
> just to check if my app will now be able to access stuff that I made
> inaccessible in server.policy
>
> Nothing happens.
> Not after restarting domain/redeploying either.
>
> Is there anything I need to enable to have per-app policy files?
>
> My app was deployed using directory deployment (jruby container),
> maybe that influences stuff, since there's no directory for it in
> domains/domain1/applications either.
>

Thats right. I think this is a missing feature/bug that needs to be
worked on. The jruby container needs to work with the Security
infrastructure in glassfish in similar ways that the web container or
ejb container does.

Please open an issue and assign to jruby.

thanks,

-vivek.
> Thanks for any help.
> Mathijs
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>
>